HIGH7.5

GHSA-5pg8-h4gv-m3p8

Null pointer deference in fltk

Details

An issue was discovered in the fltk crate before 0.15.3 for Rust. There is a NULL pointer dereference during attempted use of a multi label type if the image is nonexistent.

Are you affected?

Enter the version of the package you're using.

Affected packages

crates.io/fltk

Introduced in: 0Fixed in: 0.15.3

Upgrade fltk to 0.15.3 or newer (ecosystem crates.io).

References

https://nvd.nist.gov/vuln/detail/CVE-2021-28306[ADVISORY]
https://github.com/MoAlyousef/fltk-rs/issues/519[WEB]
https://github.com/MoAlyousef/fltk-rs[PACKAGE]
https://rustsec.org/advisories/RUSTSEC-2021-0038.html[WEB]